# CalNet Shibboleth Identity Provider (SAML 2.0 Metadata)

**Canonical:** https://apis.io/apis/ucb/calnet-shibboleth/  
**Provider:** University of California, Berkeley — https://apis.io/providers/ucb/  
**Base URL:** https://shib.berkeley.edu/idp/shibboleth  
**Documentation:** https://calnet.berkeley.edu/

CalNet Shibboleth Identity Provider (SAML 2.0 Metadata) is one of 8 APIs that [University of California, Berkeley](https://apis.io/providers/ucb/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity Federation, SAML, Shibboleth, InCommon, and Authentication. The published artifact set on APIs.io includes API documentation.

UC Berkeley's Shibboleth identity provider, operated by IST-CalNet, publishes a complete unauthenticated SAML 2.0 metadata document describing how any service provider federates with the institution. The EntityDescriptor carries entityID urn:mace:incommon:berkeley.edu, a shibmd:Scope of berkeley.edu, an IDPSSODescriptor supporting Shibboleth 1.0, SAML 1.1 and SAML 2.0 with HTTP-POST, HTTP-Redirect and HTTP-POST-SimpleSign bindings, SingleLogoutService endpoints, and an AttributeAuthorityDescriptor exposing SAML1 and SAML2 SOAP AttributeQuery services. The signing certificate is issued to O=UC Berkeley, OU=IST-Calnet. Berkeley's entry is also served by InCommon's MDQ service as a signed entity, confirming active federation and eduGAIN reach. This is the most substantial machine-readable artifact the institution publishes to an anonymous caller.

## Machine-readable artifacts (3)

- **IdentityFederation** — https://shib.berkeley.edu/idp/shibboleth
- **Documentation** — https://calnet.berkeley.edu/
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/ucb/refs/heads/main/conformance/ucb-education-standards-conformance.yml

## Other University of California, Berkeley APIs (7)

- [API Central (Developer Portal)](https://apis.io/apis/ucb/api-central/)
- [UC Berkeley API Gateway](https://apis.io/apis/ucb/api-gateway/)
- [UC Berkeley Library GeoData (GeoBlacklight) Catalog API](https://apis.io/apis/ucb/geodata/)
- [MyBRC Cluster Access Management API](https://apis.io/apis/ucb/mybrc/)
- [UC Berkeley Digital Collections OAI-PMH (TIND tenant)](https://apis.io/apis/ucb/digicoll-oai/)
- [eScholarship Repository and OAI-PMH (California Digital Library tenant)](https://apis.io/apis/ucb/escholarship/)
- [UC Library Search / Primo VE Discovery (Ex Libris tenant)](https://apis.io/apis/ucb/library-search/)

## Tags

Identity Federation, SAML, Shibboleth, InCommon, Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/ucb/calnet-shibboleth/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/ucb/.
